CVE-1999-0067: Apache HTTP Server

High severity, CVSS 10.0. EPSS: 86.9% chance of exploitation in the next 30 days.

phf CGI program allows remote command execution through shell metacharacters.

Affected products

• Apache HTTP Server: version 1.0.3 only
• Ncsa Ncsa Httpd: version 1.5a only

Published 1996-03-20. Last modified 2026-06-16.